We are still actively working on the spam issue.

SVG

From InstallGentoo Wiki
Revision as of 05:45, 21 February 2016 by Se7en (talk | contribs)
Jump to: navigation, search

The Scalable Vector Graphics Format (or SVG) is a graphics format created by the W3C for use in web pages. In 1999, the W3C Standardized the SVG format in the HTML 4.0 Documentation. SVG is based on XML.

Functionality

The resulting SVG image, converted to PNG format

Unlike basic image formats, like PNG or JPEG, the SVG image format uses XML code to render a graphic. Because of this, it can render images and text with much greater resolution as it is simply rendering a code format, then an image. An example of an SVG image:

Template error: are you trying to use the = sign? Visit Help:Template#Escape template-breaking characters for workarounds.

This code would produce the graphic to the right.

Dangers

Due to the fact that the SVG is rendered from an XML Mark-up, it can easily be used as an exploit. One common example is uploading an SVG image with Malicious Javascript. This was done multiple times to 8chan's /tech/ board. The exploit uses nonsense javascript intended to loop indefinitely until the user's computer crashes, or simpily kills the program.

Template error: are you trying to use the = sign? Visit Help:Template#Escape template-breaking characters for workarounds.

Another noted Javascript exploit done with SVG images is creating a redirect link to obcene photography. This was done using this code:

Template error: are you trying to use the = sign? Visit Help:Template#Escape template-breaking characters for workarounds.

When opening an SVG image you don't trust, you should run it with either Javascript disabled, or an addon that performs that same task, installed and enabled.